Submit the customer for verification

Submit the customer for verification, the ONLY call that starts a review.

Documents arrive earlier, on create or PATCH, and wait in our archive; the body carries nothing but the customer id. Refuses with 422 verification_incomplete rather than failing opaquely further down. Safe to repeat: a new round on the SAME applicant, never a second identity. requested_info opens a scoped round instead, exempt from that check.

curl -X POST "https://sandbox.rasto.co/api/customers/example_string/verifications/submit" \
  -H "Content-Type: application/json" \
  -H "Api-Key: example_string" \
  -H "Api-Version: example_string" \
  -H "Idempotency-Key: example_string" \
  -H "Api-Key: YOUR_API_KEY" \
  -d '{
  "intake_method": "example_string",
  "requested_info": [
    "example_string"
  ]
}'

import requests
import json

url = "https://sandbox.rasto.co/api/customers/example_string/verifications/submit"
headers = {
  "Content-Type": "application/json",
  "Api-Key": "YOUR_API_KEY",
  "Api-Version": "example_string",
  "Idempotency-Key": "example_string"
}
data = {
  "intake_method": "example_string",
  "requested_info": [
    "example_string"
  ]
}

response = requests.post(url, headers=headers, json=data)
print(response.json())

const response = await fetch("https://sandbox.rasto.co/api/customers/example_string/verifications/submit", {
  method: "POST",
  headers: {
  "Content-Type": "application/json",
  "Api-Key": "YOUR_API_KEY",
  "Api-Version": "example_string",
  "Idempotency-Key": "example_string"
},
  body: JSON.stringify({
  "intake_method": "example_string",
  "requested_info": [
    "example_string"
  ]
})
});

const data = await response.json();
console.log(data);

package main

import (
    "fmt"
    "net/http"
    "bytes"
    "encoding/json"
)

func main() {
    data := []byte(`{
  "intake_method": "example_string",
  "requested_info": [
    "example_string"
  ]
}`)

    req, err := http.NewRequest("POST", "https://sandbox.rasto.co/api/customers/example_string/verifications/submit", bytes.NewBuffer(data))
    if err != nil {
        panic(err)
    }

    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("Api-Key", "example_string")
    req.Header.Set("Api-Version", "example_string")
    req.Header.Set("Idempotency-Key", "example_string")
    req.Header.Set("Api-Key", "YOUR_API_KEY")

    client := &http.Client{}
    resp, err := client.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    fmt.Println("Response Status:", resp.Status)
}

require 'net/http'
require 'json'

uri = URI('https://sandbox.rasto.co/api/customers/example_string/verifications/submit')
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = true

request = Net::HTTP::Post.new(uri)
request['Content-Type'] = 'application/json'
request['Api-Key'] = 'example_string'
request['Api-Version'] = 'example_string'
request['Idempotency-Key'] = 'example_string'
request['Api-Key'] = 'YOUR_API_KEY'
request.body = '{
  "intake_method": "example_string",
  "requested_info": [
    "example_string"
  ]
}'

response = http.request(request)
puts response.body

{}

{
  "error": "Unprocessable Entity",
  "message": "The request was well-formed but contains semantic errors",
  "code": 422,
  "details": [
    {
      "field": "password",
      "message": "Password must be at least 8 characters long"
    }
  ]
}

POST

/api/customers/{customer_id}/verifications/submit

POST

Base URLstring

Target server for requests. Edit to use your own host.

API Key (header: Api-Key)

Api-Keystring

Required

API key (sent in header)

The media type of the request body

Options: application/json

The /api contract to serve this request under, as an ISO date. Omit to use the default (2026-08-01), omitting it always keeps today's behaviour, so a future breaking change cannot move you. Supported: 2026-08-01.

header

Idempotency-Keystring

Required

Unique per request; a retry with the same key replays the stored response byte-for-byte.

intake_methodstring

requested_infostring